linux/net/ipv4/netfilter
Stephen Hemminger 9f59365374 nf_nat: use secure_ipv4_port_ephemeral() for NAT port randomization
Use incoming network tuple as seed for NAT port randomization.
This avoids concerns of leaking net_random() bits, and also gives better
port distribution. Don't have NAT server, compile tested only.

Signed-off-by: Stephen Hemminger <shemminger@vyatta.com>

[ added missing EXPORT_SYMBOL_GPL ]

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-08-18 21:32:32 -07:00
..
Kconfig netfilter: make security table depend on NETFILTER_ADVANCED 2008-07-23 16:42:42 -07:00
Makefile
arp_tables.c
arpt_mangle.c
arptable_filter.c netfilter: arptables in netns for real 2008-07-26 17:48:59 -07:00
ip_queue.c
ip_tables.c
ipt_CLUSTERIP.c net: use the common ascii hex helpers 2008-07-30 16:30:15 -07:00
ipt_ECN.c
ipt_LOG.c
ipt_MASQUERADE.c
ipt_NETMAP.c
ipt_REDIRECT.c
ipt_REJECT.c
ipt_TTL.c
ipt_ULOG.c
ipt_addrtype.c netfilter: ipt_addrtype: Fix matching of inverted destination address type 2008-08-18 21:29:57 -07:00
ipt_ah.c
ipt_ecn.c
ipt_recent.c netfilter: ipt_recent: fix race between recent_mt_destroy and proc manipulations 2008-07-31 00:38:31 -07:00
ipt_ttl.c
iptable_filter.c
iptable_mangle.c
iptable_raw.c
iptable_security.c netfilter: ip{,6}tables_security: fix future section mismatch 2008-07-26 17:48:38 -07:00
nf_conntrack_l3proto_ipv4.c
nf_conntrack_l3proto_ipv4_compat.c netfilter: accounting rework: ct_extend + 64bit counters (v4) 2008-07-21 10:10:58 -07:00
nf_conntrack_proto_icmp.c
nf_nat_amanda.c
nf_nat_core.c netfilter: nf_nat_core: eliminate useless find_appropriate_src for IP_NAT_RANGE_PROTO_RANDOM 2008-07-21 10:10:57 -07:00
nf_nat_ftp.c
nf_nat_h323.c
nf_nat_helper.c
nf_nat_irc.c
nf_nat_pptp.c
nf_nat_proto_common.c nf_nat: use secure_ipv4_port_ephemeral() for NAT port randomization 2008-08-18 21:32:32 -07:00
nf_nat_proto_dccp.c
nf_nat_proto_gre.c
nf_nat_proto_icmp.c
nf_nat_proto_sctp.c
nf_nat_proto_tcp.c
nf_nat_proto_udp.c
nf_nat_proto_udplite.c
nf_nat_proto_unknown.c
nf_nat_rule.c
nf_nat_sip.c netfilter: nf_nat_sip: c= is optional for session 2008-07-21 10:11:02 -07:00
nf_nat_snmp_basic.c
nf_nat_standalone.c
nf_nat_tftp.c